Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

Page of 1264
 
3-58
Cisco ASA Series 명령 참조 , S 명령
  
3      show as-path-access-list through show auto-update 명령              
  show asp drop
    Causes 1 and 2 will occur simultaneously with flow drop reason "No     memory to 
complete flow".
Recommendation:
    - Observe if free system memory is low.
    - Observe if flow drop reason "No memory to complete flow" occurs.
    - Observe if connection count reaches the system connection limit with     the command 
"show resource usage".
Syslogs:
    None
----------------------------------------------------------------
Name: cluster-early-sec-chk-fail
Cluster early security check has failed:
    Director applied early security check has failed due to ACL, WCCP     redirect, 
TCP-intercept or IP option.
Recommendation:
    This counter is informational and the behavior expected. The packet will     be 
dropped.
Syslogs:
    None.
----------------------------------------------------------------
Name: cluster-queued-ccl-unknown
Cluster CCL unknown stub:
    A queued cluster data packet received over ccl was processed but unit has     unknown 
role.
Recommendation:
    None.
Syslogs:
    None.
----------------------------------------------------------------
Name: cluster-dir-nat-changed
Cluster director NAT action changed:
    Cluster director NAT action has changed due to NAT policy change, update     or 
expiration before queued ccl data packet can be processed.Recommendation:
    This counter is informational and the behavior expected. The packet will     be 
dropped.
Syslogs:
    None.
----------------------------------------------------------------
Name: cluster-dir-invalid-ifc
Cluster director has packet with invalid ingress/egress interface:
    Cluster director has processed a previously queued packet with invalid     ingress 
and/or egress interface. This is a result of interface removal     (through CLI) before 
the packet can be processed.
Recommendation:
    This counter is informational and the behavior expected. The packet will     be 
dropped.
Syslogs:
    None.
----------------------------------------------------------------
Name: cluster-parent-owner-left
Flow removed at bulk sync becasue parent flow is gone:
    Flow is removed during bulk sync because the parent flow's owner has left the cluster.
Recommendation: